OpenAS2 / OpenAs2App

OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.
https://sourceforge.net/projects/openas2/
BSD 2-Clause "Simplified" License
182 stars 136 forks source link

AS2 Transus sending issues #341

Closed HamzaDevz closed 4 months ago

HamzaDevz commented 12 months ago

Hello,

We are using Transus provider to send messages to our clients.

Reception is fine, no issues. For sending here is the error we have :

image

Here is our current partner configuration :

 <receiver name="Partner"/>
        <attribute name="as2_mdn_options" value="signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, SHA1"/>
        <attribute name="receiverIDs" value="OUR_ID"/>
        <attribute name="subject" value="File $attributes.filename$ sent from $sender.name$ to $receiver.name$"/>
        <attribute name="remove_cms_algorithm_protection_attrib" value="false"/>
        <attribute name="prevent_canonicalization_for_mic" value="false"/>
        <attribute name="sign" value="SHA1"/>
        <attribute name="senderIDs" value="Company"/>
        <attribute name="resend_max_retries" value="3"/>
        <attribute name="as2_receipt_option" value="http://xxx.transus.com:xxxx"/>
        <attribute name="content_transfer_encoding" value="binary"/>
        <attribute name="protocol" value="as2"/>
        <attribute name="encrypt" value="3DES"/>
        <attribute name="as2_url" value="http://xxx.transus.com:xxxx"/>
        <attribute name="rename_digest_to_old_name" value="false"/>
        <attribute name="name" value="Lulubuy-to-Bol"/>
        <pollerConfig enabled="true"/>
    </partnership>

Maybe are we missing something here ? Transus seems to be a very old EDI provider. What would be the best configuration ?

uhurusurfa commented 12 months ago

I am not clear how you are using OpenAS2. You say you are using Transus and the error screenshot you show is not an OpenAS2 screen so It is impossible to help you without a lot more clairty. Your best starting point is the troubleshooting section in the OpenAS2HowTo.pdf that comes with the OpenAS2 package.

VboxNick commented 12 months ago

Try to set remove_cms_algorithm_protection_attrib to true on the partnership level.

<attribute name="remove_cms_algorithm_protection_attrib" value="true"/>
igwtech commented 12 months ago

I might be wrong since it was a long time ago I connected with a N-Software based Trading Partner. N-Software is not an actual AS2/EDI software but a set of libraries left for the user to implement and configure their own solution. After some network sniffing and log combing we detected that the particular implementation of the partner didn't support chunked-transfer. To disable Chunk-Transfer in OpenAS2 just read the "14.5. Content Length Versus Chunked" section in the manual.

TLDR; You can try setting:

or

in the partnership configuration.

Regards, J

On Tue, Oct 10, 2023 at 9:53 AM nick @.***> wrote:

Try to set remove_cms_algorithm_protection_attrib to false on the partnership level.

— Reply to this email directly, view it on GitHub https://github.com/OpenAS2/OpenAs2App/issues/341#issuecomment-1755475637, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA2QND52XDOZK2XPCKTFYPTX6VHNHAVCNFSM6AAAAAA5Y46SUGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTONJVGQ3TKNRTG4 . You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Javier Munoz

CEO

Greicodex Software

+58 2127629120 <+58+2127629120> @.*** www.greicodex.com Av Francisco Solano, Centro Solano Plaza, Oficina PHA, Caracas, Venezuela

HamzaDevz commented 11 months ago

Try to set remove_cms_algorithm_protection_attrib to true on the partnership level.

<attribute name="remove_cms_algorithm_protection_attrib" value="true"/>

No it didn't worked...

I might be wrong since it was a long time ago I connected with a N-Software based Trading Partner. N-Software is not an actual AS2/EDI software but a set of libraries left for the user to implement and configure their own solution. After some network sniffing and log combing we detected that the particular implementation of the partner didn't support chunked-transfer. To disable Chunk-Transfer in OpenAS2 just read the "14.5. Content Length Versus Chunked" section in the manual. TLDR; You can try setting: or in the partnership configuration. Regards, J On Tue, Oct 10, 2023 at 9:53 AM nick @.> wrote: Try to set remove_cms_algorithm_protection_attrib to false on the partnership level. — Reply to this email directly, view it on GitHub <#341 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA2QND52XDOZK2XPCKTFYPTX6VHNHAVCNFSM6AAAAAA5Y46SUGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTONJVGQ3TKNRTG4 . You are receiving this because you are subscribed to this thread.Message ID: @.> -- Javier Munoz CEO Greicodex Software +58 2127629120 <+58+2127629120> @.*** www.greicodex.com Av Francisco Solano, Centro Solano Plaza, Oficina PHA, Caracas, Venezuela

You're right @igwtech, we needed to add <attribute name="no_chunked_max_size" value="LARGE_NUMBER_IN_BYTES"/> I put the value 104857600.

Now, reception/sending works perfectly.

Thanks a lot!